IP address

Shodan(more info)

Passive DNS

Tags: IP in hostname

Warden events (5)

2025-04-25: ReconScanning (node.86eb21): 1; ReconScanning (node.f90c6b): 3
2025-04-24: ReconScanning (node.f90c6b): 1

Origin AS: AS63949 - LINODE-AP
BGP Prefix: 172.104.128.0/19
geo: Germany, Frankfurt am Main; 🕑 Europe/Berlin
hostname: 172-104-151-97.ip.linodeusercontent.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 172.104.0.0 - 172.105.255.255
last_activity: 2025-04-25 13:48:15
last_warden_event: 2025-04-25 13:48:15
rep: 0.10654761904761904
reserved_range: 0
Shodan's InternetDB: Open ports: 443, 5000, 5001, 5002, 5005, 5006, 5007, 5009, 5010, 5025, 5083, 5172, 5201, 5222, 5251, 5256, 5432, 5435, 5454, 5543, 5555, 5560, 5594, 5601, 5672, 5696, 5698, 5801, 5900, 5901, 5908, 5910, 5918, 5938, 5984, 5986, 5990, 6000, 6001, 6002, 6005, 6011, 6021, 6080, 6100, 6102, 6308, 6352, 6443, 6514, 6561, 6622, 6633, 6653, 6664, 6666, 6667, 6668, 7001, 7005, 7012, 7018, 7071, 7081, 7173, 7218, 7403, 7415, 7433, 7434, 7443, 7474, 7537, 7547, 7657, 7773, 7777, 7788, 7989, 7999, 8000, 8001, 8006, 8008, 8009, 8010, 8028, 8029, 8047, 8048, 8053, 8055, 8064, 8065, 8069, 8080, 8081, 8085, 8088, 8089, 8090, 8098, 8099, 8112, 8139, 8156, 8176, 8181, 8186, 8188, 8200, 8238, 8248, 8318, 8333, 8334, 8403, 8404, 8410, 8418, 8421, 8428, 8431, 8436, 8443, 8465, 8466, 8500, 8502, 8513, 8525, 8543, 8544, 8545, 8554, 8556, 8575, 8598, 8630, 8640, 8649, 8686, 8708, 8728, 8782, 8784, 8787, 8813, 8815, 8832, 8834, 8873, 8876, 8880, 8881, 8888, 8889, 8891, 8900, 8905, 9000, 9001, 9002, 9008, 9009, 9024, 9035, 9048, 9051, 9052, 9067, 9085, 9090, 9091, 9092, 9095, 9100, 9110, 9123, 9131, 9143, 9145, 9151, 9157, 9158, 9160, 9180, 9183, 9194, 9200, 9206, 9220, 9280, 9292, 9295, 9306, 9333, 9389, 9398, 9418, 9443, 9456, 9530, 9550, 9595, 9600, 9633, 9663, 9761, 9800, 9861, 9869, 9876, 9898, 9916, 9943, 9944, 9955, 9997, 9999, 10000, 10001, 10003, 10028, 10032, 10080, 10134, 10243, 10250, 10302, 10380, 10443, 10554, 11000, 11075, 11112, 11210, 11211, 11288, 11300, 11434, 12000, 12016, 12088, 12117, 12137, 12139, 12183, 12186, 12194, 12196, 12199, 12206, 12207, 12251, 12257, 12280, 12342, 12345, 12353, 12360, 12361, 12368, 12379, 12383, 12396, 12402, 12404, 12424, 12433, 12434, 12448, 12462, 12466, 12480, 12495, 12510, 12514, 12520, 12526, 12541, 12542, 12573, 12590, 12902, 13082, 13579, 13780, 14082, 14344, 14894, 14900; Tags: cloud, eol-product; CPEs: cpe:/o:linux:linux_kernel, cpe:/a:f5:nginx, cpe:/a:f5:nginx:1.18.0, cpe:/o:canonical:ubuntu_linux
ts_added: 2025-04-24 23:41:30.167000
ts_last_update: 2025-04-27 23:41:40.219000

Warden event timeline

DShield event timeline